This should be marked as HIGH (P1) for the 1.5 release There are some gcc and ld flags which are BKMs for creating more secure applications. These should be adopted as the default (or optional).
Dup of earlier bug will update that one *** This bug has been marked as a duplicate of bug 3868 ***
.